When thinking about enterprise risk management, managers often regard other organizations for models worth following in terms of strategies for tackling such issues. However, how can you pick the rightful organizations to do so? Although the degree of attention paid to risk management systems is highly variable, you can be confident that one type of organization will always place risk management above many other departments: prisons.